3 ms·
Maybe ash keys and got keys need to be protected from access by anything local unless given permission? Right now they are just files sitting there that can be
by bhouston 7y ago
Maybe ash keys and got keys need to be protected from access by anything local unless given permission? Right now they are just files sitting there that can be read by any standard user process right?
- saurik 7y agoOk macOS you can easily throw your SSH keys into the secure Keychain (not that I do this...).
- bhouston 7y agoIt should be the default that they are protected though on all os. We should not automatically trust locally installed apps anymore. They should be sandboxed by default like on Android and they should ask for permissions as they need them. Windows and Linux need to get with the times. My dev env should be sandboxed like everything else. Git can have ssh permissions but not every random tool from pip or the ceasepool that is npm.
- swebs 7y agoSnap packages on Linux do this already https://ubuntu.com/blog/a-guide-to-snap-permissions-and-interfaces https://ubuntu.com/blog/a-guide-to-snap-permissions-and-inte...